That might have to be `params.slice(*ALLOWED_PARAMS)`, now that I think about it.